Cisco Releases Security Updates for Security Manager

Threat ID:: CC-3674
Threat Severity:: Information only
Published:: 18 November 2020 12:00 AM

Report a cyber attack: call 0300 303 5222 or email [email protected]

Affected platforms

The following platforms are known to be affected:

Cisco Security Manager Versions: 4.21 and earlier

Threat details

Introduction

Cisco has released security updates to address vulnerabilities in Cisco Security Manager. A remote attacker could exploit these vulnerabilities to obtain sensitive information.

Remediation advice

Affected organisations are encouraged to review the below Cisco security advisories and apply the relevant updates.

Remediation steps

Type	Step
Patch	Cisco Security Manager Path Traversal Vulnerability \| cisco-sa-csm-path-trav-NgeRnqgR https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-csm-path-trav-NgeRnqgR
Patch	Cisco Security Manager Static Credential Vulnerability \| cisco-sa-csm-rce-8gjUz9fW https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-csm-rce-8gjUz9fW

Last edited: 18 November 2020 12:06 pm